Single-qubit optical quantum fingerprinting 
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We analyze and demonstrate the feasibility and superiority of linear optical single-qubit finger- 
printing over its classical counterpart. For one-qubit fingerprinting of two-bit messages, we prepare 
'tetrahedral' qubit states experimentally and show that they meet the requirements for quantum 
fingerprinting to exceed the classical capability. We prove that shared entanglement permits f 00% 
reliable quantum fingerprinting, which will outperform classical fingerprinting even with arbitrary 
amounts of shared randomness. 
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Introduction.- Quantum communication can signifi- 
cantly improve on the resource requirements compared 
to classical communication 0. Fingerprinting, which 
enables an efficient way of inferring whether longer mes- 
sages are identical or not, is a particularly striking ex- 
ample as quantum fingerprinting offers an exponential 
reduction of resources compared to classical fingerprint- 
ing 2J. In fact, even for single-qubit fingerprinting one 
can demonstrate an advantage of quantum protocols with 
respect to classical ones Here we establish the fea- 
sibility of single-qubit optical quantum fingerprinting, 
by theoretical analysis and also by experimentally gen- 
erating and assessing the appropriate quantum optical 
states for encoding. In particular we (i) develop an op- 
tical protocol for single-qubit fingerprinting, (ii) show 
that two-photon coincidence measurements suffice as the 
experimental test for comparing fingerprints, (iii) prove 
that one shared entangled bit between Alice and Bob 
allows zero-error quantum fingerprinting which outper- 
forms classical fingerprinting even with unlimited shared 
randomness between Alice and Bob, and (iv) present 
experimental results on the supply of fingerprint states 
that demonstrates the feasibility of the protocol. Our 
results open the prospect of experimental quantum com- 
munication complexity; although here we focus on single- 
qubit fingerprinting and correlated photon pairs, scala- 
bility will become possible as multiphoton entanglement 
capabilities improve 



Within the simultaneous message passing model [5j, 
fingerprinting is constructed as follows. Two parties, Al- 
ice (A) and Bob (B), receive classical n-bit message in- 
puts x and y from a supplier Sapna (S). Alice and Bob 
wish to test their messages for equality but are forbid- 
den to communicate with each other. They can however 
communicate with a third party Roger (R). Communi- 
cation is expensive, so Alice and Bob create (classical 
or quantum) fingerprints of length g for their respective 
messages, which they send to Roger. Roger's goal is to 
generate a single bit value z which provides the best in- 



ference of the function 
EQ(x,y) 



if x 7^ y 

1 if x = y 
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and Roger is successful if z = EQ(x, y). Each message 
belongs to a set M — {0, ...,m — 1} comprised of m 
different messages represented as bit strings of length n = 
[log 2 m] ) and each fingerprint to a set F = {0, ...,/ — 1} 
of / different fingerprints. Classically, g — |~log 2 /] and 
F = {0, l} 9 while in the quantum case F C 7Yf for TL 2 = 
span{|0), |1)}. The protocol is evaluated according to the 
worst case scenario (WCS), in which Sapna always sends 
message pairs for which the probability for z ^ EQ(x, y) 
is maximized (i.e. performance in the WCS corresponds 
to the 'guarantee' on the protocol). 

We consider two experimental scenarios: 1) Alice and 
Bob each simultaneously receive unentangled single pho- 
tons with polarization states expressed in the log- 
ical basis |0) and |1) and, 2) Alice and Bob share a 
source of entangled photon pairs in the singlet Bell state 
|*") = (|0, 1) - |1,0))/V2. In the first scenario we are 
able to show that a linear optical single-qubit quantum 
fingerprinting protocol outperforms classical fingerprint- 
ing without a shared resource. In the second scenario, 
Alice and Bob share entanglement, and we show that this 
protocol can yield perfect one-qubit fingerprinting for 
m = 4, outperforming one-bit fingerprinting for m = 4 
with an arbitrary amount of shared randomness. 

Encoding:- For any message w € M that Alice or 
Bob receive, they transform their qubit to a unique \Q W ) 
with |fi = {6,4>)) ee cosf |0) + exp(i0)sfn§ The 
state can be understood geometrically by identifying 6 
and cj> with azimuthal and polar angles of the (Bloch) 
sphere. We assume that Alice and Bob employ the same 
mapping: x — y \Cl x ) — \fl y ). Quantum finger- 
printing allows m different qubit states so each mes- 
sage is distinctly encoded, but the distinguishability of 
these distinct states diminishes as m increases, with in- 
distinguishability quantified by <5(f2',f2) ee |(Sl'|f2)| 2 = 
| cos y cos | + exp[i(0 — (/>')] sin y sin || 2 . Because of a 
nonzero overlap, Roger can misinterpret two different 
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messages as identical. In the WCS, the corresponding 
error rate depends on <5 max = maxf^/) 8(Cl w ', Q w ), and 
the strategy for qubit encoding should minimize S max . 

Singlc-qubit fingerprinting is especially interesting be- 
cause of its current feasibility. To demonstrate this, we 
analyze the case m = 4 (n = 2). In this case <5 ma x is 
minimized by the following set of four states, 

F = {\n w );Q = (0o, fo) = (0,0) or 

fl w = (2cos- 1 ^ r ,^-w) for w= 1,2,3}, (2) 
v 3 3 

and <5=5 for all pairs of different states 0, Q . We refer 
to the states J2J as 'tetrahedral states' because the four 
states form the vertices of a tetrahedron on the Bloch 
sphere ||. 

Protocol.- Alice and Bob map their two-bit messages 
to the tetrahedral states, and Roger's task is to assess 
EiQ(x,y) by measuring and inferring whether |fi x ) = 
| f^). The original proposals 0,0 provided Roger with a 
controlled swap gate and an ancilla qubit (Fig. 1 (a)). 
The ancilla is prepared as (|0) + \1))/V2 and entan- 
gled with the fingerprint states as follows: the two fin- 
gerprint states are not swapped if the ancilla is in the 
state |0) and swapped otherwise. The ancilla then passes 
through a Hadamard gate and is measured in the logical 
basis with outcome r G {0, 1} corresponding to the an- 
cilla being in state \r). This strategy yields a one-sided 
error protocol because Roger's error rate when Sapna 
sends x = y is p^ r mc = 1 - |[1 + 5] = 0. In the 
WCS, Sapna always sends different states so that, when 
Roger obtains r = 0, he infers z = 1 with error rate 
pdiff = pWCS = perr = 1 _ |[1 _ 5]. For m = 4 and 

tetrahedral encoding, we obtain p^.^ s — | . 

A controlled swap gate is not available in a linear op- 
tical system, but we show that it is not required. If Alice 
and Bob each send a single photonic qubit encoded in 
polarization to Roger, then Roger only needs to measure 
whether the photons are in the same polarization. This 
measurement can be accomplished with the use of a Bell 
state discriminator that can distinguish between |\& _ ) 
and the other three Bell states. Optically this discrimi- 
nation is achieved by directing each of Alice's and Bob's 
photons into separate input ports of a symmetric beam 
splitter and observing photon count events from two pho- 
todetectors placed at the output ports. A coincidence 
detection implies the state of the photon pair before the 
beam splitter was not orthogonal to I* - ) because the 
other three Bell states result in two photons leaving the 
beam splitter through the same port |£| • These states ex- 
hibit a Hong-Ou-Mandel (HOM) dip in the coincidence 
rate as the delay of the incidence photons is varied. 

For m = 4, Alice and Bob each receive two-bit mes- 
sages from Sapna, which are used to encode their pho- 
tonic qubit into one of the tetrahedral states. Their pho- 
tons are transmitted to Roger who infers using a symmet- 
ric beam splitter whether the messages were the same or 
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protocol 0[J (b) Linear optical implementation: Alice (A) 
and Bob (B) each receive a two-bit message from Sapna (S) 
and a single photon in a known polarization state from a 
source. The photons are transformed (represented by A) to 
particular tetrahedral states according to the received mes- 
sage. The photons are sent to Roger (R) who mixes them at 
a symmetric beam splitter E3 and uses coincidence detection 
(two detectors D and a multiplier g>) to infer if the messages 
were the same or different, (c) Coincidence dip with state |fii) 
mixed with jfi ) (°), (•), [fta) (+), and |f2 3 ) (x). The 

plots correspond to the normalized coincidence rate i?/i? ma x 
(with ii ma x = 474 s _1 ) vs the relative delay between two pho- 
tons. The dip depth for indistinguishable photons is labelled 
d. 



different. This protocol is depicted in Fig. 1(b). Ide- 
ally Alice and Bob would have separate single-photon- 
on-demand sources, but practically they will be sup- 
plied with correlated, unentangled photons from a down- 
conversion source. Later we consider the case that Alice 
and Bob share entangled photons. 

Following the same notation as for the controlled swap 
case, Roger assigns r := for a no-coincidence and r := 1 
for a coincidence event, then employs (as before) the 
pure strategy z = 1 — r. The result r = 1 guarantees 
the messages are unequal but r = only indicates that 
the messages were possibly the same. In fact this HOM 
dip protocol is equivalent to the controlled swap version 
of single qubit quantum fingerprinting because if Sapna 
sends x ^ y, the probability that Alice's and Bob's pho- 
tons do not trigger a coincidence detection is identically 
Pelf = Pen- — ^4^- Thus Sapna always sends different 
messages in the WCS. For m = 4, p^cs _ 2 



err 



This error rate appears relatively high, yet it is superior 
to classical one-bit fingerprinting with one-sided error, in 
which failure is guaranteed for at least onepair of mes- 
sages, resulting in a 100% WCS error rate Qj. Of course 
100% failure rate for the classical case can be improved 
by allowing Roger a random strategy, but then the quan- 
tum protocol can be improved in the same way, always 
maintaining its superiority over the classical case Q. 
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TABLE I: Experimental visibilities of the Hong-Ou-Mandel 
dip for each pair of tetrahedral states 
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Experiment.- The feasibility of this protocol has been 
illustrated by creating simultaneous pairs of tetrahedral 
states and analyzing the dip achieved by Roger's set-up 
in Fig. 1(b). To create correlated photons, a Ti:Sapphire 
laser tuned to a wavelength of 790 nm emitted 170 
fs pulses that were frequency doubled and then down- 
converted in a type I configuration via a 2-mm beta- 
barium borate crystal. Output photons were spectrally 
filtered with a 2-nm interference filter and transmitted 
through A/2 and A/4 waveplates which were rotated to 
convert the polarization state in each channel into one 
of the tetrahedral states. The two photons were then 
overlapped in free space on a symmetric beam split- 
ter and subjected to measurements with single-photon 
counting modules; the experimental results are presented 
in Fig. 1(c) where state |fii) is mixed with itself and each 
of the other three states. The largest dip in Fig. 1(c) 
corresponds to the traditional HOM dip with two iden- 
tical states mixing at the beam splitter, and the degree 
of distinguishability is varied by controlling the relative 
delay between the two photons. The experimental coin- 
cidence rates as a fraction of the maximum coincidence 
rate i?/i? m ax for all 16 possible fingerprint pairs is given 
in Tableland is consistent with Clarke et a/.'s experi- 
mental results for tetrahedral states |7|. 

Due to birefringence in the beam splitter and limita- 
tions on constructing the unitary transformation required 
to create perfect tetrahedral states, the visibilities vary, 
but the dip depth d for mixing identical states is con- 
sistently at 88% or higher, as shown in the diagonal el- 
ements of Table 1. Ideally Table 1 would have unity for 
all diagonal elements (ie. d — 1) and 1/3 for all off- 
diagonal elements. We use Bob's state |f2i) as the ref- 
erence state for assessing feasibility, which consistently 
produces visibilities of approximately 30% when mixed 
with Alice's other three states. Note that in the non-ideal 
case, d < 1, and the error probabilities change. That is, 
p^f = 1(1 + dS dis ) and p s c ?r = 1 - 1(1 + d5 same ) [ill, 
where for the tetrahedral states <5 samc = 1 and Sdis =1/3. 

This experimental scheme is not directly applicable to 
fingerprinting because Alice and Bob are not aware when 
a photon pair has been produced, so the amount of in- 
formation the parties send to Roger cannot be traced. 
This problem can be resolved by using either deter- 



ministic single-photon sources or heralded single-photon 
sources based on two down-converters. Another issue is 
that a large fraction of information is lost due to poor 
single-photon detection efficiency. This can be overcome 
by Roger using number-resolving detectors |l2|, post- 
selecting the data on the registration of two photons, 
and requesting Alice and Bob to repeat their messages if 
photons were lost. 

Two-sided errors.- The one-sided error protocol is 
predicated on unitary diagonal elements of Table as 
this is impossible, an experimental protocol must be as- 
sessed for two-sided errors because, even if Sapna sends 
the same messages to Alice and Bob, Roger is no longer 
guaranteed to obtain the measurement outcome r = 1. 
Allowing Roger to err on both inferences lowers the clas- 
sical WCS error probability bound from 1 to p^.^ s > 0.5 
for one-bit fingerprinting |3j. Thus, quantum fingerprint- 
ing is advantageous provided that Roger's strategy yields 
p„ r cs < 0.5 when permitting a two-sided error protocol. 

Whereas Roger followed a pure strategy for protocols 
with one-sided error this restriction is unnecessary for a 
two-sided error protocol. As such we introduce a pro- 
cedure for producing a successful two-sided error proto- 
col where Roger incorporates randomness and follows a 
mixed strategy instead. 

The mixed strategy is as follows. Roger makes an ini- 
tial inference z* = 1 — r as before. If z* = 1 Roger infers 
z = with probability iro and if z* = Roger infers z = 1 
with probability 7Ti. 

The success rate is 

7rop£? +(l- 7ri )(l- p ^), 

7r lP -r + (i-^)(i-p:r c ), (3) 

for Sapna supplying x ^ y and x = y respectively. Roger 
then chooses values of ttq and 7Ti such that his success 
rate is identical for both cases making Sapna's choice of 
messages irrelevant: all cases correspond to a WCS. We 
solve both success equations (j2J based on the values in 
Table H| where d = 0.88, p^ mc ~ 0.06, and p^f - 0.65 
and find that the success rate can achieve 0.59 which is 
above the classical threshold of 0.5. This optimal case is 
achieved by setting ttq — 0.37 and ~k\ — 0, which means 
that Roger's best strategy is to treat the protocol as if 
it were one-sided, thereby invoking randomness only on 
the side with error. 

Shared entanglement.- Thus far Alice and Bob have 
been denied any communication, but experimentally it 
is straightforward to provide Alice and Bob with an en- 
tangled pair of photons. We show that shared entangle- 
ment allows perfect single-qubit quantum fingerprinting 
for m = 4 and, furthermore, exceeds the classical limit. 
The classical analog to this case corresponds to the per- 
formance in the WCS for Alice and Bob sharing random 
bits that are secret from Sapna. 

We allow Alice and Bob to share the Bell singlet state 
\^~). Alice and Bob each receive a two-bit message from 
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Sapna and apply one of the four Pauli operations accord- 
ing to which message has been sent. The result is that 
the state sent to Roger is one of the four Bell states. If 
Alice and Bob perform the same Pauli operation, \^^) is 
invariant (up to a global phase); if Alice and Bob apply 
different transformations, \^f~) maps to a different Bell 
state. Thus, for Roger to infer whether the messages are 
the same or different, he needs only to detect whether 
he has received the state \^^) or not. The Bell state 
discriminator, in the form of a HOM dip apparatus dis- 
cussed earlier suffices as a discriminator between the Bell 
state and the other three Bell states 0. For a per- 
fectly efficient setup, a coincidence is guaranteed for an 
input Bell state l^ - ), and no coincidence occurs for the 
other Bell states. Therefore, the protocol can achieve 
-Perr = and by consuming one ebit for each pair of 
two-bit messages delivered Sapna. 

The physics underlying this fingerprinting scheme re- 
sembles that employed in quantum dense coding 0, but 
the purposes that these two communication protocols 
serve are quite different. Whereas, in the latter case, 
a shared ebit is used to communicate a classical two-bit 
message from Alice to Bob, the former allows a third 
party (Roger) to compare two two-bit messages. 

A 100% success rate is unachievable in classical one-bit 
fingerprinting regardless of how many random bits Alice 
and Bob share. If Alice and Bob share one random bit 
(in the case of a shared ebit, Alice and Bob could convert 
their ebit to a shared random bit if they wish), Roger's 
success rate for classical one-bit fingerprinting rises from 
zero to | when Roger follows a pure strategy. If Alice 
and Bob share an arbitrarily large number of random 
bits, Roger's success rate improves but cannot exceed 
\ for any fixed number of random bits |ll| . Of course 



limited detector efficiency for the entangled protocol will 
diminish the success rate, but any success rate beyond | 
is superior to the classical case. 

Conclusions.- We have proposed an optical protocol 
for singlc-qubit fingerprinting, experimentally demon- 
strated its functionality for the case m = 4, and shown 
that tetrahedral states can be produced that meet the re- 
quirements for beating the classical one-bit fingerprinting 
protocol for m = 4. We have also proven that single- 
qubit quantum fingerprinting with shared entanglement 
can succeed with a zero error rate, which beats the clas- 
sical fingerprinting protocol with an arbitrary amount 
of shared randomness between Alice and Bob. The ex- 
perimental results show that, in reality, two-sided errors 



must be accounted for, but we have shown that Roger's 
best strategy is to randomly vary his inference of whether 
the states are the same but not change his guesses as to 
whether they are different, and this approach yields a 
performance, given experimentally obtained parameters, 
that exceeds the classical error bound. Quantum finger- 
printing is an excellent example of the new field of quan- 
tum communication complexity 1], and our results here 
open this field to experiments. Further work is now un- 
derway on quantum fingerprinting with two qubits and 
beyond, which will allow scaling and complexity issues to 
be fully investigated. 

Note:- O ptic al quantum fingerprinting was considered 
by Massar [ljj, but his protocol is very different: Al- 
ice and Bob share a single photon, and the protocol uses 
two-slit interference as an alternative approach to Roger's 
strategy. In our protocol Alice and Bob each have inde- 
pendent photons, with or without shared entanglement. 
Despite the related names, the two protocols are entirely 
different and with different aims: our goal is to ensure 
that quantum fingerprinting operates within the strict 
confines of the simultaneous message passing model, in- 
spired by de Beaudrap's analysis of single-qubit finger- 
printing 0. 

We appreciate valuable discussions with J. N. de Beau- 
drap, R. Cleve, and J. Watrous. This research has been 
supported by Alberta's informatics Circle of Research 
Excellence (iCORE). 
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